CVE-2019-13481 | BDVDB-2026-119006 Detail

Description#

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the MTU field to SetWanSettings.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/dir818-3.pdf
http://www.securityfocus.com/bid/109131

Exploit#

No public exploit known

History#

Version 12019-07-10Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.